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SPECIFICATION AMENDMENTS 

Please replace paragraph [0016] with the following amended paragraph: 
| [0016] A short review of op e ratioa - the operation of a VPN is provided, denning the terms used 
in the description of the present invention. VPNs ensure segregation of user domain IP address 
| space using route distiuguishers (RD), and constrains constrain distribution of routing 
information at a provider edge (PE) router using forwarding tables VRR User domain 
segregation is performed at the ingress PE router, while filtering of the routing information is 
performed by the egress PE router. 

Please replace paragraph [0033] with the following amended paragraph: 
[0033] Routes received at a PE from peers are VPN-IP routes (e.g. VPN-IPv4), each route being 
accompanied by the export route target configured on the originating VRF. They are first placed 
into the master routing information base (RIB) 10, as shown in FIG. 2 A for PE1 only, after 
passing an initial input policy check. The^ the process (BGP) determines which VRFs the routes 
need to be placed into (route filtering). feftpR¥ -ImnRTs configured on a VRF are used by BGP 
to filter these-VPN-IP routes that are learnt -learned from other PE routers. If a VRF has an 
ImpRT configured, then only the VPN-IP routes that contain this extended community as a path 
attribute are learned by this VRF (or in other words, the destination becomes reachable by this 
VRF). Routes that do not have matching extended community route targets are not learned by the 
VRF and are discarded. Each VRF is now associated with a sub-RIB that holds the routing 
information for that VRF. FIG. 2 illustrates only the sub-RIBs for PE1, which are sub-RIB 21 
associated to VRF A 20 and sub-RIB 16 associated to VRF B 15. 
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at AIM AMENDMENTS 

This listing of claims will replace all prior versions and listings of claims in the 

application. 

T .istinP Of Claims: 

1. (Currently Amended) A method of managing virtual routing forwarding (VRF) tables at a 
provider edge PE router of a L3 virtual private network (VPN), said PE router maintaining a 
VPN-IP master routing information base (RIB) and a sub-RIB for each said VRF table, 
comprising the steps of: 

^B^ms^mm^^ '"»p<* ™ te tar * et ^p RT) tree com P rising a11 ^ T 

attributes currently configured on said PE router; 

modifying an ImpRTi attribute of a VRFi table; 

searching sand ImpRT tree for a match to said ImpRTi attribute to identify a VRFm table 
having said ImpRTi attribute; and 

performing a route refresh ope r ation only if a match is not found; and 
updating said VRFi table accordingly. 

2. (Currently Amended) The method of claim 1, wherein said ImpRT tree maintains a list of 
all ImpRT attributes at-said-P&*e4e aPEnode , each ImpRT attribute being associated with all 
VRF tables that are currently configured with said ImpRT attribute. 
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3. (Original) The method of claim 1, wherein said step of modifying comprises adding said 
rmpRTi attribute to said VRFi table. 

4. (Original) The method of claim 3, wherein said step of updating comprises copying all 
routes Rm from said VRFm table into said VRFi table, whenever said VRFm table is found in 
said ImpRT tree. 

5. (Original) The method of claim 4, further comprising updating said ImpRT tree to 
include an association between said ImpRTi attribute and said VRFi table. 

6. (Currently Amended) The method of claim 3, wherein said step of updating comprises 
performing a route refresh whenever said VRFm table_is not found in said ImpRT tree. *4natefe 
is not found 

7. (Currently Amended) The method of claim 4, further comprising: 

searching for said reroutes Rm in a sub-RTBm associated with said VRFm table; and 
copying said routes Rm from said sub-RTBm into said VRFi table based on all route 
target attributes configured for said VRFi table, including said added ImpRTi attribute. 

8. (Currently Amended) The method of claim 7, further comprising adding said se^routes 
Rm to each VRF table in the-arouting database available at said PE router. 
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0. (Onginal) The method nf claim 2, wherein said «p «f -arching is performed rtuough 

said master KIB. 

,10. ^y^Tta^^^^^^™ 1 ^ 
' all rout* in all VRF ,Me S at said PE router and fhrther include, all routes that we CM out 
at aaidPE router usiiie TmpRT attributes. 

1 1 . (Original) The method of claim 1, -herein said step of modifying comprises removing 
said import route target TmpKTi from said VRFi tabic. 

12. (Currently Amended) 

jjaraing all routes in said VRFi table and 
j removing Ml routes from said VRF table that no longer match ^remaining import route 

Laigete of said VRFi table. 

I 1 3. (Currently Amended) The method of claim 12, further comprising deleting said routed 
States t hat™ longer match from the sub-RIB of said-A*£d VKFMM- 

I .14. (Currently Amended) The method of claim 13, further comprising P?W t«^deleting i.i 
said master RIB every routs Rd that no longer matches any ImpRT attribute in said ImpRT tree. 
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15. (Currently Amended) The method of claim 1, further comprises maintaining at said PE 

router a rejected routes tree comprised of routes that were not accepted during the~ImpRT 

filtering, wherein said step of searching is also performed on said rejected routes tree. 



16. (Currently Amended) At a provider edge PE router, a tree data structure , stored on a 
computer-readable medium, comprising, for each import route target ImpRT attribute configured 
on said PE router, a pointer to a virtual routing forwarding VRF table having said respective 
ImpRT attribute; 

wherein a route refresh operation is performed only if a match between a modified 
ImpRT attrib ute and an attributed stored in said VRF table is not found. 

17. (Currently Amended) The tree data structure claimed in olaim 15 claim 16 . further 
providing the association between each said VRF table and a respective sub-RIB. 

18. (Currently Amended) A tree data structure stored on a computer-readable medium for 
enabling modification of virtual routing forwarding (VRF) tables at a PE router, comprising, for 
each import route target ImpRT attribute configured on said PE router, a pointer to a VRF table 
with said respective ImpRT attribute; 

wherein a route refresh operation is performed only if a match between a modified 
ImpRT attribute and an attributed stored in said VRF table is not found . 
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